In this post we’ll look at how to install Pwndrop on Docker.
Pwndrop is a self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.
A red team is a group that helps organizations to improve themselves by providing opposition to the point of view of the organization that they are helping. They are often effective in helping organizations overcome cultural bias and broaden their problem solving capabilities. – Wikipedia
We’re going to use Portainer to deploy the following stack:
|– SECRET_PATH=/pwndrop #optional|
You can change the port to be whatever you’d like it to be. Just make sure that nothing else is using the port you want to use.
Also, be sure to change the SECRET_PATH for security reasons.
Here is the list of features, which you can use from the get-go in the release version.
Drag & drop uploading of files
Easily drag & drop your files onto pwndrop admin panel to upload them.
Works on mobile
Since the UI is made with Bootstrap, they made sure it is responsive and looks good on every device.
A fun way to use pwndrop on your phone is to take photos with phone camera through the admin panel and they will be automatically uploaded to your server.
Share files over HTTP, HTTPS and even WebDAV
Best part of pwndrop is that it is not just an ordinary web server. The main focus was to support serving files also over WebDAV, which is used for pulling 2nd stage payloads through variety of different methods.
DB Tech Discord: https://discord.io/DBTech